Đang tải... (xem toàn văn)
Ebook hướng dẫn lập trình công nghệ ASP.NET MVC 4 framework
Programming ASP.NET MVC 4 Jess Chadwick, Todd Snyder, and Hrusikesh Panda Beijing • Cambridge • Farnham • Köln • Sebastopol • Tokyo Programming ASP.NET MVC 4 by Jess Chadwick, Todd Snyder, and Hrusikesh Panda Copyright © 2012 Jess Chadwick, Todd Synder, Hrusikesh Panda. All rights reserved. Printed in the United States of America. Published by O’Reilly Media, Inc., 1005 Gravenstein Highway North, Sebastopol, CA 95472. O’Reilly books may be purchased for educational, business, or sales promotional use. Online editions are also available for most titles (http://my.safaribooksonline.com). For more information, contact our corporate/institutional sales department: 800-998-9938 or corporate@oreilly.com. Editor: Rachel Roumeliotis Production Editor: Rachel Steely Copyeditor: Rachel Head Proofreader: Leslie Graham, nSight Indexer: Lucie Haskins Cover Designer: Karen Montgomery Interior Designer: David Futato Illustrators: Robert Romano and Rebecca Demarest October 2012: First Edition. Revision History for the First Edition: 2012-09-14 First release See http://oreilly.com/catalog/errata.csp?isbn=9781449320317 for release details. Nutshell Handbook, the Nutshell Handbook logo, and the O’Reilly logo are registered trademarks of O’Reilly Media, Inc. Programming ASP.NET MVC 4, the image of a scabbardfish, and related trade dress are trademarks of O’Reilly Media, Inc. Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks. Where those designations appear in this book, and O’Reilly Media, Inc., was aware of a trademark claim, the designations have been printed in caps or initial caps. While every precaution has been taken in the preparation of this book, the publisher and authors assume no responsibility for errors or omissions, or for damages resulting from the use of the information con- tained herein. ISBN: 978-1-449-32031-7 [LSI] 1347629749 Table of Contents Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii Part I. Up and Running 1. Fundamentals of ASP.NET MVC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Microsoft’s Web Development Platforms 3 Active Server Pages (ASP) 3 ASP.NET Web Forms 4 ASP.NET MVC 4 The Model-View-Controller Architecture 4 The Model 5 The View 6 The Controller 6 What’s New in ASP.NET MVC 4? 6 Introduction to EBuy 8 Installing ASP.NET MVC 9 Creating an ASP.NET MVC Application 9 Project Templates 10 Convention over Configuration 13 Running the Application 15 Routing 15 Configuring Routes 16 Controllers 18 Controller Actions 19 Action Results 19 Action Parameters 21 Action Filters 23 Views 24 Locating Views 24 Hello, Razor! 26 Differentiating Code and Markup 27 iii Layouts 28 Partial Views 30 Displaying Data 31 HTML and URL Helpers 33 Models 34 Putting It All Together 35 The Route 35 The Controller 35 The View 38 Authentication 41 The AccountController 42 Summary 44 2. ASP.NET MVC for Web Forms Developers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 It’s All Just ASP.NET 45 Tools, Languages, and APIs 46 HTTP Handlers and Modules 46 Managing State 46 Deployment and Runtime 47 More Differences than Similarities 47 Separation of Application Logic and View Logic 48 URLs and Routing 48 State Management 49 Rendering HTML 50 Authoring ASP.NET MVC Views Using Web Forms Syntax 54 A Word of Caution 55 Summary 56 3. Working with Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Building a Form 57 Handling Form Posts 59 Saving Data to a Database 59 Entity Framework Code First: Convention over Configuration 60 Creating a Data Access Layer with Entity Framework Code First 60 Validating Data 61 Specifying Business Rules with Data Annotations 63 Displaying Validation Errors 65 Summary 68 4. Client-Side Development . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 Working with JavaScript 69 Selectors 71 Responding to Events 74 iv | Table of Contents DOM Manipulation 76 AJAX 77 Client-Side Validation 79 Summary 83 Part II. Going to the Next Level 5. Web Application Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 The Model-View-Controller Pattern 87 Separation of Concerns 87 MVC and Web Frameworks 88 Architecting a Web Application 90 Logical Design 90 ASP.NET MVC Web Application Logical Design 90 Logical Design Best Practices 92 Physical Design 93 Project Namespace and Assembly Names 93 Deployment Options 94 Physical Design Best Practices 94 Design Principles 96 SOLID 96 Inversion of Control 102 Don’t Repeat Yourself 110 Summary 110 6. Enhancing Your Site with AJAX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111 Partial Rendering 111 Rendering Partial Views 112 JavaScript Rendering 117 Rendering JSON Data 118 Requesting JSON Data 119 Client-Side Templates 120 Reusing Logic Across AJAX and Non-AJAX Requests 123 Responding to AJAX Requests 124 Responding to JSON Requests 125 Applying the Same Logic Across Multiple Controller Actions 126 Sending Data to the Server 128 Posting Complex JSON Objects 129 Model Binder Selection 131 Sending and Receiving JSON Data Effectively 132 Cross-Domain AJAX 133 JSONP 133 Table of Contents | v Enabling Cross-Origin Resource Sharing 137 Summary 138 7. The ASP.NET Web API . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139 Building a Data Service 139 Registering Web API Routes 141 Leaning on Convention over Configuration 142 Overriding Conventions 143 Hooking Up the API 143 Paging and Querying Data 146 Exception Handling 147 Media Formatters 149 Summary 152 8. Advanced Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153 Data Access Patterns 153 Plain Old CLR Objects 153 Using the Repository Pattern 154 Object Relational Mappers 156 Entity Framework Overview 158 Choosing a Data Access Approach 159 Database Concurrency 160 Building a Data Access Layer 161 Using Entity Framework Code First 161 The EBuy Business Domain Model 163 Working with a Data Context 167 Sorting, Filtering, and Paging Data 168 Summary 174 9. Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175 Building Secure Web Applications 175 Defense in Depth 175 Never Trust Input 176 Enforce the Principle of Least Privilege 176 Assume External Systems Are Insecure 176 Reduce Surface Area 176 Disable Unnecessary Features 177 Securing an Application 177 Securing an Intranet Application 178 Forms Authentication 183 Guarding Against Attacks 192 SQL Injection 192 Cross-Site Scripting 198 vi | Table of Contents Cross-Site Request Forgery 199 Summary 201 10. Mobile Web Development . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203 ASP.NET MVC 4 Mobile Features 203 Making Your Application Mobile Friendly 205 Creating the Auctions Mobile View 205 Getting Started with jQuery Mobile 207 Enhancing the View with jQuery Mobile 209 Avoiding Desktop Views in the Mobile Site 216 Improving Mobile Experience 216 Adaptive Rendering 217 The Viewport Tag 217 Mobile Feature Detection 218 CSS Media Queries 220 Browser-Specific Views 221 Creating a New Mobile Application from Scratch 224 The jQuery Mobile Paradigm Shift 224 The ASP.NET MVC 4 Mobile Template 224 Using the ASP.NET MVC 4 Mobile Application Template 226 Summary 229 Part III. Going Above and Beyond 11. Parallel, Asynchronous, and Real-Time Data Operations . . . . . . . . . . . . . . . . . . . . . 233 Asynchronous Controllers 233 Creating an Asynchronous Controller 234 Choosing When to Use Asynchronous Controllers 236 Real-Time Asynchronous Communication 236 Comparing Application Models 237 HTTP Polling 237 HTTP Long Polling 238 Server-Sent Events 239 WebSockets 240 Empowering Real-Time Communication 241 Configuring and Tuning 245 Summary 246 12. Caching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247 Types of Caching 247 Server-Side Caching 248 Client-Side Caching 248 Table of Contents | vii Server-Side Caching Techniques 248 Request-Scoped Caching 248 User-Scoped Caching 249 Application-Scoped Caching 250 The ASP.NET Cache 251 The Output Cache 252 Donut Caching 255 Donut Hole Caching 257 Distributed Caching 259 Client-Side Caching Techniques 264 Understanding the Browser Cache 264 App Cache 265 Local Storage 268 Summary 269 13. Client-Side Optimization Techniques . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271 Anatomy of a Page 271 Anatomy of an HttpRequest 272 Best Practices 273 Make Fewer HTTP Requests 274 Use a Content Delivery Network 274 Add an Expires or a Cache-Control Header 276 GZip Components 278 Put Stylesheets at the Top 279 Put Scripts at the Bottom 279 Make Scripts and Styles External 281 Reduce DNS Lookups 282 Minify JavaScript and CSS 282 Avoid Redirects 283 Remove Duplicate Scripts 285 Configure ETags 285 Measuring Client-Side Performance 286 Putting ASP.NET MVC to Work 289 Bundling and Minification 289 Summary 293 14. Advanced Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295 Wayfinding 295 URLs and SEO 297 Building Routes 298 Default and Optional Route Parameters 299 Routing Order and Priority 301 Routing to Existing Files 301 viii | Table of Contents [...]... version of ASP.NET MVC and would like to both create ASP.NET MVC 4 applications and continue working with ASP.NET MVC 3 applications, fear not ASP.NET MVC can be installed and run side by side with ASP.NET MVC 3 installations Once you’ve gotten everything installed, it’s time to proceed to the next step: creating your first ASP.NET MVC 4 application Creating an ASP.NET MVC Application The ASP.NET MVC 4 installer... 395 398 398 399 40 0 40 1 40 1 Creating and Configuring an IIS Website Publishing from Within Visual Studio Deploying to Windows Azure Creating a Windows Azure Account Creating a New Windows Azure Website Publishing a Windows Azure Website via Source Control Summary 40 2 40 3 40 7 40 8 40 8 40 9 41 0 Part VI Appendixes A ASP.NET MVC and Web Forms Integration 41 5 B Leveraging... of ASP.NET MVC OK, we’ll admit that EBuy is also “just a bunch of code.” In fact, you can download EBuy in its entirety from the book’s website: http://www programmingaspnetmvc.com Now, let’s stop talking about an application that doesn’t exist yet and start building it! Installing ASP.NET MVC In order to begin developing ASP.NET MVC applications, you’ll need to download and install the ASP.NET MVC 4. .. 1-3) This dialog lets you customize the ASP.NET MVC 4 application that Visual Studio is going to generate for you by letting you specify what kind of ASP.NET MVC site you want to create Project Templates To begin, ASP.NET MVC 4 offers several project templates, each of which targets a different scenario: Empty The Empty template creates a bare-bones ASP.NET MVC 4 application with the appropriate folder... named ASP.NET MVC 4 Web Application This is your entry point to the world of ASP.NET MVC and is what you’ll use to create the new EBuy web application project that you’ll build on as you progress through this book To create a new project, select the Visual C# version of the ASP.NET MVC 4 Web Application template and enter Ebuy.Website into the Name field (see Figure 1-2) Creating an ASP.NET MVC Application... Testing Manual Testing Automated Testing Levels of Automated Testing Unit Tests Fast Integration Tests 343 344 345 345 345 347 348 Table of Contents | ix Acceptance Tests What Is an Automated Test Project? Creating a Visual Studio Test Project Creating and Executing a Unit Test Testing an ASP.NET MVC Application Testing the Model Test-Driven Development Writing Clean Automated Tests Testing Controllers... but with the NET Framework 4. 5 release, they are now a fundamental part of the framework What’s more, ASP.NET MVC embraces and extends the core NET Framework functionality to make this tooling even more usable in your ASP.NET MVC applications Chapter 13 helps you tackle all of these concepts and also shows you how to use the new tooling offered in the core ASP.NET and ASP.NET MVC Frameworks Web API Simple... happen to return data In Chapter 6, you’ll see how to really take advantage of AJAX on the client—and you’ll use ASP.NET Web API services to do it! What’s New in ASP.NET MVC 4? | 7 Did You Know…? ASP.NET MVC is open source! That’s right—as of March 2012, the entire source code for the ASP.NET MVC, Web API, and Web Pages Frameworks is available to browse and download on CodePlex What’s more, developers... industry ASP.NET MVC is Microsoft’s latest addition to the world of ASP.NET providing web developers with an alternative development approach that helps you build web applications with ease The main goal of this book is simple: to help you to build a complete understanding of the ASP.NET MVC 4 Framework from the ground up However, it doesn’t stop there —the book combines fundamental ASP.NET MVC concepts... This is as easy as visiting the ASP.NET MVC website and clicking the Install button This launches the Web Platform Installer, a free tool that simplifies the installation of many web tools and applications Follow the Web Platform Installer wizard to download and install ASP.NET MVC 4 and its dependencies to your machine Note that in order to install and use ASP.NET MVC 4, you must have at least PowerShell . (ASP) 3 ASP. NET Web Forms 4 ASP. NET MVC 4 The Model-View-Controller Architecture 4 The Model 5 The View 6 The Controller 6 What’s New in ASP. NET MVC 4? . Application from Scratch 2 24 The jQuery Mobile Paradigm Shift 2 24 The ASP. NET MVC 4 Mobile Template 2 24 Using the ASP. NET MVC 4 Mobile Application Template